metadata about the token, such as the algorithm used for signing.

Stores the claims, i.e., data being transmitted

ensuring of  the token's integrity and authenticity